PT-2014-2388 · Mongodb · Mongodb

Ratul Gupta · Published 2014-02-17 · Updated 2014-05-07 · CVE-2012-6619

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions MongoDB versions prior to 2.3.2

Description The issue concerns the default configuration of MongoDB, where objects are not validated. This allows remote authenticated users to cause a denial of service or read system memory by sending a crafted BSON object in the column name of an insert command. This action triggers a buffer over-read.

Recommendations For versions prior to 2.3.2, update to version 2.3.2 or later to resolve the issue. As a temporary workaround, consider validating objects before processing them to prevent potential exploitation. Restrict access to the insert command to minimize the risk of denial of service or system memory exposure.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-6619

MGASA-2014-0083

RHSA-2014:0230

RHSA-2014:0440

Affected Products

Mongodb

References · 18

• 🔥 https://jira.mongodb.org/browse/SERVER-7769 · Exploit
• 🔥 http://blog.ptsecurity.com/2012/11/attacking-mongodb.html · Exploit
• https://osv.dev/vulnerability/MGASA-2014-0083 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2012-6619 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-6619 · Vendor Advisory
• https://ubuntu.com/security/CVE-2012-6619 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-6619 · Security Note
• http://rhn.redhat.com/errata/RHSA-2014-0440.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2014-0230.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0083.html · Security Note
• http://openwall.com/lists/oss-security/2014/01/08/9 · Note
• http://article.gmane.org/gmane.comp.security.oss.general/11822 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6619 · Note
• https://bugs.mageia.org/show_bug.cgi?id=12251 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1049748 · Note